1. Home
  2. CVE Database
  3. CVE-2025-20196
MEDIUM · 5.3

CVE-2025-20196

A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application host...

Vulnerability Description

A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the Cisco IOx application hosting environment to stop responding. The IOx process will need to be manually restarted to recover services.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
CiscoIos Xe16.1.1
CiscoCgr1000 Firmware< 15.9\(3\)m12
CiscoCgr1000-
CiscoIr510 Wpan Firmware-
CiscoIr510 Wpan-
CiscoIc3000 Industrial Compute Gateway Firmware< 1.5.2
CiscoIc3000 Industrial Compute Gateway-
Cisco807 Industrial Integrated Services Router Firmware< 15.9\(3\)m11
Cisco807 Industrial Integrated Services Router-
Cisco809 Industrial Integrated Services Router Firmware< 15.9\(3\)m11
Cisco809 Industrial Integrated Services Router-
Cisco829 Industrial Integrated Services Router Firmware< 15.9\(3\)m11
Cisco829 Industrial Integrated Services Router-
CiscoCatalyst 9100-
CiscoCatalyst 9105-
CiscoCatalyst 9105Ax-
CiscoCatalyst 9105Axi-
CiscoCatalyst 9105Axw-
CiscoCatalyst 9105I-
CiscoCatalyst 9105W-

Related Weaknesses (CWE)

CWE-307

References

FAQ

What is CVE-2025-20196?

CVE-2025-20196 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application host...

How severe is CVE-2025-20196?

CVE-2025-20196 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-20196?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios Xe, Cisco Cgr1000 Firmware, Cisco Cgr1000, Cisco Ir510 Wpan Firmware, Cisco Ir510 Wpan.